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Response to Amendment 
Response to Arguments 

1 . Applicant's arguments with respect to claims 1-31 have been considered but are 
moot in view of the new ground(s) of rejection. 



Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

4. Claims 1, 3, 4, 6-14, 16-22, 24 and 26-31 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Chavez et al. (U.S. Patent # 6,591,102 B1) in view of 
Wright (U.S. Patent # 6,957,061 B1). 

Consider claim 1, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
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services, reading on the claimed "method for providing access to a service for a 
user in a communication system," (col. 1 line 67- col. 2 lines 2), comprising: 
receiving an outgoing service request from a mobile handset, reading on the 
claimed "user," and a base station reading a memory for storing authentication 
information for mobile handsets services by the base station, reading on the 
claimed "node." The base station determines whether the authentication 
information is stored in the memory. If it is, the base station reads the 
authentication information and performs normal authentication. If it isn't, the 
base station transmits a request for authentication information to the mobile 
switching system, wherein the mobile switching system forwards the request to a 
service provider wireless server. The service provider wireless server maintains 
records as to which services the mobile handset receives, reading on the claimed 
"using a specific record, associated with said user, at a node in the 
communication system, determines that a user characteristic is to be verified 
prior to providing access to said service," (col. 1 lines 45-48, col. 5 lines 35-50). 

However, Chavez et al. fail to specifically disclose that a specific record 
contains information that is used to determine that a user is to be verified with a 
home network. 

In the same field of endeavor, Wright clearly shows and discloses a 
method of authenticating mobile user equipment in a mobile telecommunications, 
wherein service is requested from a serving network from a user equipment not 
directly subscribed, reading on the claimed "method for providing access to a 
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service for a user in a communication system," (col. 1 lines 25-30). The request 
for service is passed from the serving network to a home operator network to 
which the user equipment is directly subscribed. An authentication vector is 
generated in the home network, passed to the serving network, and at least part 
of the vector (authentication element) passed to the user equipment. The user 
equipment generates a predetermined key set identifier (KSI), and passes it to 
the serving network, (col. 1 lines 25-43). The user equipment can allow the 
authentication vector to be used for a predetermined time period, number of calls 
or total call duration. Before requesting service, the user equipment determined 
whether the authentication vector should still be valid and issues with the KSI 
given by the serving network or a special KSI, which forces the serving network 
to request a new authentication vector when the next service request is made, 
reading on the claimed "using a specific record, containing information which, 
determines that a user characteristic is to be verified with a home network prior to 
providing access to said service," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user who has been 
previously authenticated as taught by Wright in the method of Chavez et al., in 
order to reduce the amount of data transmitted from a handset to a base station 
(Chavez et al.; abstract). 

Consider claim 3, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 1 above, and in addition, 
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Wright further discloses that before requesting service, the user equipment 
determined whether the authentication vector should still be valid and issues with 
the KSI given by the serving network or a special KSI, which forces the serving 
network to request a new authentication vector when the next service request is 
made, reading on the claimed "deciding based on said information that the 
authentication and/or authorization needs be verified," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user who has been 
previously authenticated as taught by Wright in the method of Chavez et al., in 
order to reduce the amount of data transmitted from a handset to a base station 
(Chavez et al.; abstract). 

Consider claim 4, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 1 above, and in addition, 
Chavez et al. further discloses that the base station determines whether the 
authentication information is stored in the memory, and if it is, the base station 
reads the authentication information and performs normal authentication, reading 
on the claimed "performing the authentication and/or authorization," (col. 5 lines 
25-60). 

Consider claim 6, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 4 above, and in addition, 
Chavez et al. further discloses that the base station determines whether the 
authentication information is stored in the memory, and if it is, the base station 
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reads the authentication information and performs normal authentication, reading 
on the claimed "performing the authentication and/or authorization in the node if 
the required parameters are available," (col. 5 lines 25-60). 

Consider claim 7, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, reading on the claimed "method for providing a user of user equipment 
with access to a service from a service provider node in a wireless 
communication system," (col. 1 line 67- col. 2 lines 2), comprising: receiving an 
outgoing service request from a mobile handset, reading on the claimed "user," 
and a base station reading a memory for storing authentication information for 
mobile handsets services by the base station, reading on the claimed "node." 
The base station determines whether the authentication information is stored in 
the memory. If it is, the base station reads the authentication information and 
performs normal authentication. If it isn't, the base station transmits a request for 
authentication information to the mobile switching system, wherein the mobile 
switching system forwards the request to a service provider wireless server. The 
service provider wireless server maintains records as to which services the 
mobile handset receives, reading on the claimed "using a user specific record, 
determines that a user characteristic is to be verified prior to providing access to 
said service; and providing access to said service responsive to said user 
specific record," (col. 1 lines 45-48, col. 5 lines 35-50). 
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However, Chavez et al. fail to specifically disclose that a specific record 
indicates a condition that is used to determine that a user is to be verified with a 
home network. 

In the same field of endeavor, Wright clearly shows and discloses a 
method of authenticating mobile user equipment in a mobile telecommunications, 
wherein service is requested from a serving network from a user equipment not 
directly subscribed, reading on the claimed "method for providing a user of user 
equipment with access to a service from a service provider node in a wireless 
communication system," (col. 1 lines 25-30). The request for service is passed 
from the serving network to a home operator network to which the user 
equipment is directly subscribed. An authentication vector is generated in the 
home network, passed to the serving network, and at least part of the vector 
(authentication element) passed to the user equipment. The user equipment 
generates a predetermined key set identifier (KSI), and passes it to the serving 
network, (col. 1 lines 25-43). The user equipment can allow the authentication 
vector to be used for a predetermined time period, number of calls or total call 
duration. Before requesting service, the user equipment determined whether the 
authentication vector should still be valid and issues with the KSI given by the 
serving network or a special KSI, which forces the serving network to request a 
new authentication vector when the next service request is made, reading on the 
claimed "using a user specific record indicating a condition which, if satisfied, 
determines that a user characteristic is to be verified prior to providing access to 
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said service; and providing access to said service responsive to said user 
specific record," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user who has been 
previously authenticated as taught by Wright in the method of Chavez et al., in 
order to reduce the amount of data transmitted from a handset to a base station 
(Chavez et al.; abstract). 

Consider claim 8, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Chavez et al. further disclose that the base station determines if the received 
request is for an incoming or outgoing service request. If it is for an incoming 
service request, the base station reads authentication information from the 
incoming request. The authentication information may then be stored in a 
memory in base station and normal authentication is performed, reading on the 
claimed "determining if said condition is satisfied; and providing access to said 
service without verifying said user characteristic if said condition is not satisfied," 
(col. 5 lines 10-32). 

Consider claim 9, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Chavez et al. further disclose that the base station determines if the received 
request is for an incoming or outgoing service request. If it is for an outgoing 
service request, the base station determines whether the authentication 
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information is stored in the memory. If it is, the base station reads the 
authentication information and performs normal authentication. If it isn't, the 
base station transmits a request for authentication information to the mobile 
switching system, wherein the mobile switching system forwards the request to a 
service provider wireless server. The service provider wireless server maintains 
records as to which services the mobile handset receives, reading on the claimed 
"determining if said condition is satisfied; verifying said user characteristic if said 
condition is satisfied; and subsequent to said step of verifying the user 
characteristic providing access to said service if said user characteristic indicates 
the user is permitted access to said service," (col. 1 lines 45-48, col. 5 lines 35- 
50). 

Consider claim 10, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Chavez et al. further disclose that if the request is an incoming service request, 
which could be an outgoing service request including a telephone number 
requesting a call, the base station reads the authentication information from the 
incoming service request, the information may or may not stored in memory for 
future use, if it is normal authentication is performed, if it isn't the base station 
transmits a request for authentication information, reading on the claimed 
"determining if said condition is satisfied when a call session between said user 
and said service provider node is initiated," (col. 5 lines 10-60). 
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Consider claim 11, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Chavez et al. further disclose that if the request is an incoming service request, 
wherein this request could be an incoming service request from the MSC to 
provide a communication service to mobile handset, the base station reads the 
authentication information from the incoming service request, the information 
may or may not stored in memory for future use, if it is normal authentication is 
performed, reading on the claimed "determining from the user specific record 
associated with said user if said condition exists during a call session between 
said user equipment and said service provider node," (col. 5 lines 25-60). 

Consider claim 12, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Chavez et al. further disclose receiving an outgoing service request from a 
mobile handset, and a base station reading a memory for storing authentication 
information for mobile handsets services by the base station. The base station 
determines whether the authentication information is stored in the memory. If it 
is, the base station reads the authentication information and performs normal 
authentication, reading on the claimed "indicating, via said user specific record, 
when access to said service is permitted without determining, from data stored at 
a node in said home network, if access is permitted," (col. 5 lines 35-50). 

However, Chavez et al. fail to specifically disclose that there are two 
distinct networks (home and serving) in the communication system. 
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Wright further discloses authenticating mobile user equipment in a mobile 
telecommunications, wherein service is requested from a serving network from a 
user equipment not directly subscribed, wherein the request for service is passed 
from the serving network to a home operator network to which the user 
equipment is directly subscribed, reading on the claimed "wireless 
communication system comprises a serving network in which said user 
equipment is located, and a home network, " (col. 1 lines 25-43). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user in a serving network 
that is subscribed to a home network as taught by Wright in the method of 
Chavez et al., in order to provide maximum security for the home operator 
(Wright; col. 4 lines 3-4). 

Consider claim 13, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Chavez et al. further disclose receiving an outgoing service request from a 
mobile handset, and a base station reading a memory for storing authentication 
information for mobile handsets services by the base station. The base station 
determines whether the authentication information is stored in the memory. If it 
is, the base station reads the authentication information and performs normal 
authentication, reading on the claimed "storing said user specific record at a 
node of said serving network," (col. 5 lines 35-50). 
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However, Chavez et al. fail to specifically disclose that there are two 
distinct networks (home and serving) in the communication system. 

Wright further discloses authenticating mobile user equipment in a mobile 
telecommunications, wherein service is requested from a serving network from a 
user equipment not directly subscribed, wherein the request for service is passed 
from the serving network to a home operator network to which the user 
equipment is directly subscribed, reading on the claimed "wireless 
communication system comprises a serving network in which said user 
equipment is located, and a home network, " (col. 1 lines 25-43). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user in a serving network 
that is subscribed to a home network as taught by Wright in the method of 
Chavez et al., in order to provide maximum security for the home operator 
(Wright; col. 4 lines 3-4). 

Consider claim 14, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Chavez et al. further disclose that if a the service information is not stored in 
memory from a previous request for the service information, a request is sent to 
the service provider which has a database that stores all the services a mobile is 
allowed to receive, (col. 6 lines 20-35, col. 1 lines 35-60); the service provider 
then transmits the service information back to the MSC the MSC stores the 
information in memory, (col. 6 lines 20-65); service information is transmitted to 



Application/Control Number: 10/500,370 Page 13 

Art Unit: 2617 

the MSC which the information to the base station and then authentication takes 
place, (col. 6 lines 20-65, col. 5 lines 25-60); and if the authentication is 
successful service is provided to the user, reading on the claimed "generating a 
register message at said user equipment and transmitting said register message 
to a local server node of said communication system; determining if a condition 
indicated by said user specific record stored at said local server node is satisfied; 
generating an access message at said local server node indicating that access to 
said service is permitted; and transmitting said access message to said service 
provider node," (col. 6 lines 25-60). 

Consider claim 16, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Chavez et al. further disclose that if a the service information is not stored in 
memory from a previous request for the service information, a request is sent to 
the service provider which has a database that stores all the services a mobile is 
allowed to receive, (col. 6 lines 20-35, col. 1 lines 35-60); the service provider 
then transmits the service information back to the MSC the MSC stores the 
information in memory, (col. 6 lines 20-65); service information is transmitted to 
the MSC which transmits the information to the base station and then 
authentication takes place, (col. 6 lines 20-65, col. 5 lines 25-60); and if the 
authentication is successful service is provided to the user, reading on the 
claimed "generating an invite message at said user equipment and transmitting 
said invite message to a local server node of said communication system; 
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determining if a condition indicated by said user specific record stored at said 
local server node is satisfied; generating an access message at said local server 
node indicating that access to said service is permitted; and transmitting said 
access message to said service provider node," (coL 5 lines 25-60). 

Consider claim 17, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Wright further discloses that before requesting service, the user equipment 
determined whether the authentication vector should still be valid and issues with 
the KSI given by the serving network or a special KSI, which forces the serving 
network to request a new authentication vector when the next service request is 
made, reading on the claimed "user characteristic comprises whether said user is 
authorized to access said service," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to verify that a user has been 
authenticated as taught by Wright in the method of Chavez et al., in order to 
provide maximum security for the home operator (Wright; col. 4 lines 3-4). 

Consider claim 18, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Wright further discloses that before requesting service, the user equipment 
determined whether the authentication vector should still be valid and issues with 
the KSI given by the serving network or a special KSI, which forces the serving 
network to request a new authentication vector when the next service request is 
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made, reading on the claimed "user characteristic comprises whether said user is 
authenticated to access said service," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to verify that a user has been 
authenticated as taught by Wright in the method of Chavez et al., in order to 
provide maximum security for the home operator (Wright; col. 4 lines 3-4). 

Consider claim 19, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 7 above, and in addition, 
Wright further discloses that the user equipment can allow the authentication 
vector to be used for a predetermined time period, number of calls or total call 
duration. Before requesting service, the user equipment determined whether the 
authentication vector should still be valid and issues with the KSI given by the 
serving network or a special KSI, which forces the serving network to request a 
new authentication vector when the next service request is made, reading on the 
claimed "condition determines the frequency at which said user is to be 
authorized and/or authenticated during a call session between said user 
equipment and said service provider node," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user who has been 
previously authenticated depending on a predetermined set time as taught by 
Wright in the method of Chavez et al., in order to provide maximum security for 
the home operator (Wright; col. 4 lines 3-4). 
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Consider claim 20, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 1 above, and in addition, 
Chavez et al. further discloses that if the request is an incoming service request, 
base station reads the authentication information from the incoming service 
request, the information may or may not stored in memory for future use, if it is 
normal authentication is performed, reading on the claimed "using a specific 
record comprises storing a user specific record," (col. 5 lines 25-60). 

Consider claim 21, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, reading on the claimed "server node of a communication system," (col. 
1 line 67- col. 2 lines 2), comprising: receiving an outgoing service request from a 
mobile handset, and a base station reading a memory for storing authentication 
information for mobile handsets services by the base station, reading on the 
claimed "means for receiving a message from a user equipment." The base 
station determines whether the authentication information is stored in the 
memory. If it is, the base station reads the authentication information and 
performs normal authentication. If it isn't, the base station transmits a request for 
authentication information to the mobile switching system, wherein the mobile 
switching system forwards the request to a service provider wireless server. The 
service provider wireless server maintains records as to which services the 
mobile handset receives. If the authentication is successful service is provided to 
the user, reading on the claimed "means for using a user specific record, 
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associated with said user, determines that a user characteristic is to be verified 
prior to providing a user with access to said a service; and means for generating, 
in response to said user specific record, an access message for providing said 
user with access to said service, thereby providing the user of the user 
equipment with access to a service from a service provider node," (col. 1 lines 
45-48, col. 5 lines 25-60). 

However, Chavez et al. fail to specifically disclose that a specific record 
contains information that is used to determine that a user is to be verified with a 
home network. 

In the same field of endeavor, Wright clearly shows and discloses a 
method of authenticating mobile user equipment in a mobile telecommunications, 
wherein service is requested from a serving network from a user equipment not 
directly subscribed. The request for service is passed from the serving network 
to a home operator network to which the user equipment is directly subscribed. 
An authentication vector is generated in the home network, passed to the serving 
network, and at least part of the vector (authentication element) passed to the 
user equipment. The user equipment generates a predetermined key set 
identifier (KSI), and passes it to the serving network, (col. 1 lines 25-43). The 
user equipment can allow the authentication vector to be used for a 
predetermined time period, number of calls or total call duration. Before 
requesting service, the user equipment determined whether the authentication 
vector should still be valid and issues with the KSI given by the serving network 
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or a special KSI, which forces the serving network to request a new 
authentication vector when the next service request is made, reading on the 
claimed "means for using a user specific record, associated with said user, 
indicating a condition which, if satisfied, determines that a user characteristic is to 
be verified with a home network prior to providing a user with access to said a 
service," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user who has been 
previously authenticated as taught by Wright in the method of Chavez et al., in 
order to reduce the amount of data transmitted from a handset to a base station 
(Chavez et al.; abstract). 

Consider claim 22, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 21 above, and in addition, 
Chavez et al. further discloses that if the service information is not sorted in the 
memory the MSC requests the information from the service provider, reading on 
the claimed "means for transmitting said access message to a service provider 
node," (col. 6 lines 20-50). 

Consider claim 24, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 21 above, and in addition, 
Chavez et al. further discloses that if the service information is not sorted in the 
memory the MSC requests the information from the service provider, reading on 
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the claimed "serving or proxy-call session control function node," (col. 6 lines 20- 
50). 

Consider claim 26, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 21 above, and in addition, 
Chavez et al. further discloses that if the request is an incoming service request, 
base station reads the authentication information from the incoming service 
request, the information may or may not stored in memory for future use, if it is 
normal authentication is performed, reading on the claimed "means for using a 
user specific record comprises means for storing," (col. 5 lines 25-60). 

Consider claim 27, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, comprising: receiving an outgoing service request from a mobile 
handset, reading on the claimed "user equipment," and a base station reading a 
memory for storing authentication information for mobile handsets services by 
the base station. The base station determines whether the authentication 
information is stored in the memory. If it is, the base station reads the 
authentication information and performs normal authentication. If it isn't, the 
base station transmits a request for authentication information to the mobile 
switching system, wherein the mobile switching system forwards the request to a 
service provider wireless server. The service provider wireless server maintains 
records as to which services the mobile handset receives. If the authentication is 
successful service is provided to the user, reading on the claimed "means for 
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using a specific record associated with a user, determines that a user 
characteristic is to be verified prior to providing access to said service, thereby 
providing the user with access to the service from a service provider node," (col. 
1 lines 45-48, col. 1 line 67- col. 2 lines 2, col. 5 lines 35-60). 

However, Chavez et al. fail to specifically disclose that the mobile handset 
uses a specific record that contains information to determine that a user is to be 
verified with a home network. 

In the same field of endeavor, Wright clearly shows and discloses a 
method of authenticating mobile user equipment in a mobile telecommunications, 
wherein service is requested from a serving network from a user equipment not 
directly subscribed, (col. 1 lines 25-30). The request for service is passed from 
the serving network to a home operator network to which the user equipment is 
directly subscribed. An authentication vector is generated in the home network, 
passed to the serving network, and at least part of the vector (authentication 
element) passed to the user equipment. The user equipment generates a 
predetermined key set identifier (KSI), and passes it to the serving network, (col. 
1 lines 25-43). The user equipment can allow the authentication vector to be 
used for a predetermined time period, number of calls or total call duration. 
Before requesting service, the user equipment determined whether the 
authentication vector should still be valid and issues with the KSI given by the 
serving network or a special KSI, which forces the serving network to request a 
new authentication vector when the next service request is made, reading on the 



Application/Control Number: 10/500,370 Page 21 

Art Unit: 2617 

claimed "Mobile user equipment, comprising means for using a user specific 
record associated with a user, indicating a condition which, if satisfied, 
determines that a user characteristic is to be verified with a home network prior to 
providing said user with access to a service; and means for generating, in 
response to said user specific record, an access message for providing said user 
with access to said service," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user who has been 
previously authenticated as taught by Wright in the method of Chavez et al., in 
order to reduce the amount of data transmitted from a handset to a base station 
(Chavez et al.; abstract). 

Consider claim 28, Chavez et al., as modified by Wright, clearly show and 
disclose the claimed invention as applied to claim 27 above, and in addition, 
Chavez et al. further discloses that if the request is an incoming service request, 
base station reads the authentication information from the incoming service 
request, the information may or may not stored in memory for future use, if it is 
normal authentication is performed, reading on the claimed "means for using a 
user specific record comprises means for storing a user specific record," (col. 5 
lines 25-60). 

Consider claim 29, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, reading on the claimed "method for providing access to a service for a 
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user in a communication system," (col. 1 line 67- col. 2 lines 2), comprising: 
receiving an outgoing service request from a mobile handset, reading on the 
claimed "user," and a base station reading a memory for storing authentication 
information for mobile handsets services by the base station, reading on the 
claimed "serving node." The base station determines whether the authentication 
information is stored in the memory. If it is, the base station reads the 
authentication information and performs normal authentication. If it isn't, the 
base station transmits a request for authentication information to the mobile 
switching system, wherein the mobile switching system forwards the request to a 
service provider wireless server. The service provider wireless server maintains 
records as to which services the mobile handset receives, reading on the claimed 
"storing an authorization and authentication profile, associated with said user, at 
a serving node in a serving network; using said authorization and authentication 
profile at said serving node in the communication system; wherein said 
authorization and authentication profile, determines that a user characteristic is to 
be verified prior to providing access to said service," (col. 1 lines 45-48, col. 5 
lines 35-50). 

However, Chavez et al. fail to specifically disclose that a specific record 
contains information that is used to determine that a user is to be verified with a 
home network. 

In the same field of endeavor, Wright clearly shows and discloses a 
method of authenticating mobile user equipment in a mobile telecommunications, 
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wherein service is requested from a serving network from a user equipment not 
directly subscribed, reading on the claimed "method for providing access to a 
service for a user in a communication system," (col. 1 lines 25-30). The request 
for service is passed from the serving network to a home operator network to 
which the user equipment is directly subscribed. An authentication vector is 
generated in the home network, passed to the serving network, and at least part 
of the vector (authentication element) passed to the user equipment. The user 
equipment generates a predetermined key set identifier (KSI), and passes it to 
the serving network, (col. 1 lines 25-43). The user equipment can allow the 
authentication vector to be used for a predetermined time period, number of calls 
or total call duration. Before requesting service, the user equipment determined 
whether the authentication vector should still be valid and issues with the KSI 
given by the serving network or a special KSI, which forces the serving network 
to request a new authentication vector when the next service request is made, 
reading on the claimed "authorization and authentication profile contains 
information indicating a condition which if satisfied, determines that a user 
characteristic is to be verified with a home network prior to providing access to 
said service," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user who has been 
previously authenticated as taught by Wright in the method of Chavez et al., in 
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order to reduce the amount of data transmitted from a handset to a base station 
(Chavez et al.; abstract). 

Consider claim 30, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, reading on the claimed "server node of a communication system," (col. 
1 line 67- col. 2 lines 2), comprising: receiving an outgoing service request from a 
mobile handset, and a base station reading a memory for storing authentication 
information for mobile handsets services by the base station, reading on the 
claimed "interface for receiving a message from said user equipment." The base 
station determines whether the authentication information is stored in the 
memory. If it is, the base station reads the authentication information and 
performs normal authentication. If it isn't, the base station transmits a request for 
authentication information to the mobile switching system, wherein the mobile 
switching system forwards the request to a service provider wireless server. The 
service provider wireless server maintains records as to which services the 
mobile handset receives. If the authentication is successful, service is provided 
to the user, reading on the claimed "server node configured to use a user specific 
record, associated with said user, determines that a user characteristic is to be 
verified prior to providing said user with access to said a service; and generate, 
in response to said user specific record, an access message for providing said 
user with access to said service, thereby providing the user of user equipment 
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with access to the service from a service provider node.," (col. 1 lines 45-48, col. 
5 lines 25-60). 

However, Chavez et al. fail to specifically disclose that a specific record 
contains information that is used to determine that a user is to be verified with a 
home network. 

In the same field of endeavor, Wright clearly shows and discloses a 
method of authenticating mobile user equipment in a mobile telecommunications, 
wherein service is requested from a serving network from a user equipment not 
directly subscribed. The request for service is passed from the serving network 
to a home operator network to which the user equipment is directly subscribed. 
An authentication vector is generated in the home network, passed to the serving 
network, and at least part of the vector (authentication element) passed to the 
user equipment. The user equipment generates a predetermined key set 
identifier (KSI), and passes it to the serving network, (col. 1 lines 25-43). The 
user equipment can allow the authentication vector to be used for a 
predetermined time period, number of calls or total call duration. Before 
requesting service, the user equipment determined whether the authentication 
vector should still be valid and issues with the KSI given by the serving network 
or a special KSI, which forces the serving network to request a new 
authentication vector when the next service request is made, reading on the 
claimed "use a user specific record, associated with said user, indicating a 
condition which, if satisfied, determines that a user characteristic is to be verified 
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with a home network prior to providing said user with access to said a service," 
(col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user who has been 
previously authenticated as taught by Wright in the method of Chavez et al., in 
order to reduce the amount of data transmitted from a handset to a base station 
(Chavez et al.; abstract). 

Consider claim 31, Chavez et al. clearly show and disclose a method for 
transmitting feature and authentication information for wireless communication 
services, comprising: receiving an outgoing service request from a mobile 
handset, reading on the claimed "mobile user equipment comprising processor 
and control means," and a base station reading a memory for storing 
authentication information for mobile handsets services by the base station. The 
base station determines whether the authentication information is stored in the 
memory. If it is, the base station reads the authentication information and 
performs normal authentication. If it isn't, the base station transmits a request for 
authentication information to the mobile switching system, wherein the mobile 
switching system forwards the request to a service provider wireless server. The 
service provider wireless server maintains records as to which services the 
mobile handset receives. If the authentication is successful service is provided to 
the user, reading on the claimed "use a user specific record associated with said 
user, determines that a user characteristic is to be verified prior to providing said 
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user with access to said a service; thereby providing the user with access to the 
service from a service provider node," (col. 1 lines 45-48, col. 1 line 67- col. 2 
lines 2, col. 5 lines 35-60). 

However, Chavez et al. fail to specifically disclose that the mobile handset 
uses a specific record that contains information to determine that a user is to be 
verified with a home network. 

In the same field of endeavor, Wright clearly shows and discloses a 
method of authenticating mobile user equipment in a mobile telecommunications, 
wherein service is requested from a serving network from a user equipment not 
directly subscribed, (col. 1 lines 25-30). The request for service is passed from 
the serving network to a home operator network to which the user equipment is 
directly subscribed. An authentication vector is generated in the home network, 
passed to the serving network, and at least part of the vector (authentication 
element) passed to the user equipment. The user equipment generates a 
predetermined key set identifier (KSI), and passes it to the serving network, (col. 
1 lines 25-43). The user equipment can allow the authentication vector to be 
used for a predetermined time period, number of calls or total call duration. 
Before requesting service, the user equipment determined whether the 
authentication vector should still be valid and issues with the KSI given by the 
serving network or a special KSI, which forces the serving network to request a 
new authentication vector when the next service request is made, reading on the 
claimed "Mobile user equipment, comprising process or and control means 
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configured to use a user specific record associated with said user, indicating a 
condition which, if satisfied, determines that a user characteristic is to be verified 
with a home network prior to providing said user with access to said a service; 
and generate, in response to said user specific record, an access message for 
providing said user with access to said service," (col. 3 lines 56-67). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user who has been 
previously authenticated as taught by Wright in the method of Chavez et al., in 
order to reduce the amount of data transmitted from a handset to a base station 
(Chavez et al.; abstract). 

5. Claims 2, 5, 15, 23 and 25 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Chavez et al. (U.S. Patent* 6,591,102 B1) in view of Wright (U.S. 
Patent # 6,957,061 B1), and in further view of Basilier et al. (U.S. Patent # 6,728,536). 
Consider claim 2, and as applied to claim 1 above, Chavez et al., as 
modified by Wright, clearly show and disclose the claimed invention, except that 
the information is transferred from the AAA-H. 

In the same field of endeavor, Basilier et al. clearly show and disclose a 
method in which specific information, which may be access specific and/or 
application specific information is transmitted between visiting and home 
networks, reading on the claimed "method for providing access to a service for a 
user in a communication system," (col. 1 line s66- col. 2 line 2). A user wished to 
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use the mobile terminal in the visited network, and registers in the visited 
network. The ACSA/LR assembles a registration and/or authentication message, 
and sends it to the AAA-F. The AAA-F uses a NAI to locate the appropriate 
AAA-H, and route the message to the appropriate HLR. The HLR validates or 
denies the registration request, and generates an appropriate response 
message, which is transmitted to the visited network, reading on the claimed 
"transferring said information from the AAA-H to the serving node in the signaling 
path for the service setup and/or service event and/or registration," (fig. 2 b., col. 
4 line 52- col. 5 line 25, col. 6 lines 15-30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user by communicating 
with the home network (HLR, AAA-H) as taught by Basilier et al. in the method of 
Chavez et al., as modified by Wright, in order to provide maximum security for 
the home operator (Wright; col. 4 lines 3-4). 

Consider claim 5, and as applied to claim 4 above, Chavez et al., as 
modified by Wright, clearly show and disclose the claimed invention, except that 
an AAA-H authenticates the mobile handset. 

In the same field of endeavor, Basilier et al. clearly show and disclose a 
method in which specific information, which may be access specific and/or 
application specific information is transmitted between visiting and home 
networks, reading on the claimed "method for providing access to a service for a 
user in a communication system," (col. 1 line s66- col. 2 line 2). A user wished to 
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use the mobile terminal in the visited network, and registers in the visited 
network. The ACSA/LR assembles a registration and/or authentication message, 
and sends it to the AAA-F. The AAA-F uses a NAI to locate the appropriate 
AAA-H, and route the message to the appropriate HLR. The HLR validates or 
denies the registration request, and generates an appropriate response 
message, which is transmitted to the visited network, reading on the claimed 
"performing the authentication and/or authorization by using the AAA-H," (fig.2 b., 
col. 4 line 52- col. 5 line 25, col. 6 lines 15-30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user by communicating 
with the home network (HLR, AAA-H) as taught by Basilier et al. in the method of 
Chavez et al., as modified by Wright, in order to provide maximum security for 
the home operator (Wright; col. 4 lines 3-4). 

Consider claim 15, and as applied to claim 14 above, Chavez et al., as 
modified by Wright, clearly show and disclose the claimed invention, except that 
the information is transferred from the AAA-H. 

In the same field of endeavor, Basilier et al. clearly show and disclose a 
method in which specific information, which may be access specific and/or 
application specific information is transmitted between visiting and home 
networks, (col. 1 line s66- col. 2 line 2). A user wished to use the mobile terminal 
in the visited network, and registers in the visited network. The ACSA/LR 
assembles a registration and/or authentication message, and sends it to the 
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AAA-F. The AAA-F uses a NAI to locate the appropriate AAA-H, and route the 
message to the appropriate HLR. The HLR validates or denies the registration 
request, and generates an appropriate response message, which is transmitted 
to the visited network, reading on the claimed "prior to said storing said user 
specific record, generating a request message at said local server node and 
transmitting said request message to the home AAA server of the user; and 
transferring data comprising said user specific record from said home AAA server 
to said local server node responsive to said request message," (fig.2 b., col. 4 
line 52- col. 5 line 25, col. 6 lines 15-30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user by communicating 
with the home network (HLR, AAA-H) as taught by Basilier et al. in the method of 
Chavez et al., as modified by Wright, in order to provide maximum security for 
the home operator (Wright; col. 4 lines 3-4). 

Consider claim 23, and as applied to claim 21 above, Chavez et al., as 
modified by Wright, clearly show and disclose the claimed invention, except that 
the information is transferred from the AAA-H. 

In the same field of endeavor, Basilier et al. clearly show and disclose a 
method in which specific information, which may be access specific and/or 
application specific information is transmitted between visiting and home 
networks, (col. 1 line s66- col. 2 line 2). A user wished to use the mobile terminal 
in the visited network, and registers in the visited network. The ACSA/LR 
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assembles a registration and/or authentication message, and sends it to the 
AAA-F. The AAA-F uses a NAI to locate the appropriate AAA-H, and route the 
message to the appropriate HLR. The HLR validates or denies the registration 
request, and generates an appropriate response message, which is transmitted 
to the visited network, reading on the claimed "means for receiving data 
comprising said user specific record transmitted from a home AAA server node," 
(fig.2 b., col. 4 line 52- col. 5 line 25, col. 6 lines 15-30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user by communicating 
with the home network (HLR, AAA-H) as taught by Basilier et al. in the method of 
Chavez et al., as modified by Wright, in order to provide maximum security for 
the home operator (Wright; col. 4 lines 3-4). 

Consider claim 25, and as applied to claim 21 above, Chavez et al., as 
modified by Wright, clearly show and disclose the claimed invention, except that 
the information is transferred from the AAA-H. 

In the same field of endeavor, Basilier et al. clearly show and disclose a 
method in which specific information, which may be access specific and/or 
application specific information is transmitted between visiting and home 
networks, (col. 1 line s66- col. 2 line 2). A user wished to use the mobile terminal 
in the visited network, and registers in the visited network. The ACSA/LR 
assembles a registration and/or authentication message, and sends it to the 
AAA-F. The AAA-F uses a NAI, or the significant digits of the IMSI, to locate the 
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appropriate AAA-H, and route the message to the appropriate HLR. The HLR 
validates or denies the registration request, and generates an appropriate 
response message, which is transmitted to the visited network, reading on the 
claimed "user specific record comprises a first data field identifying said user and 
a second data field determining when authentication and/or authorization of said 
user is required in order to access said service," (fig. 2 b., col. 4 line 52- col. 5 line 
25, col. 6 lines 15-30). 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to authenticate a user by communicating 
with the home network (HLR, AAA-H) as taught by Basilier et al. in the method of 
Chavez et al., as modified by Wright, in order to provide maximum security for 
the home operator (Wright; col. 4 lines 3-4). 



Conclusion 

6. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
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mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .1 36(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jaime M. Holliday whose telephone number is (571) 
272-8618. The examiner can normally be reached on Monday through Friday 7:30am 
to 4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Joseph Feild can be reached on (571) 272-4090. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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